Opened 12 years ago
Closed 12 years ago
#20336 closed defect (bug) (fixed)
XMLRPC several methods for check for capability before it exists
Reported by: | markoheijnen | Owned by: | nacin |
---|---|---|---|
Milestone: | 3.4 | Priority: | normal |
Severity: | normal | Version: | |
Component: | XML-RPC | Keywords: | has-patch commit |
Focuses: | Cc: |
Description
When you check for the capability to edit a post it also applies for not existing posts.
So if a post ID doesn't exists it will also say you are not allowed to edit the post.
So I guess wp_get_single_post should be before current_user_can. So the right error message can be applied. Also the check on post_date for "no such post" is weird
Attachments (1)
Change History (7)
#2
@
12 years ago
- Summary changed from XMLRPC mw_getPost never shows the post doesn't exists to XMLRPC several methods for check for capability before it exists
#5
@
12 years ago
- Keywords has-patch commit added
20336.diff is the result of reviewing every meta cap in class-wp-xmlrpc-server.php. Could use a second look.
Note: See
TracTickets for help on using
tickets.
Added unit test cases for the method mw_getPost [UT599]